Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.mft
File:                     wjZC0as50wnsXzPk6IFK3DWEgl8.mft (raw, json)
Hash identifier:          BnAmp+VpQ48pDaRRQZX32HFgc3QTlKu0jeH6yleend4=
Subject key identifier:   70:EB:CE:85:6A:2F:D4:52:74:AD:90:05:21:A6:78:A7:1E:31:1F:AF
Authority key identifier: C2:36:42:D1:AB:39:D3:09:EC:5F:33:E4:E8:81:4A:DC:35:84:82:5F
Certificate issuer:       /CN=c23642d1ab39d309ec5f33e4e8814adc3584825f
Certificate serial:       01962F746884E316C3175A995DD3B2E5134C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wjZC0as50wnsXzPk6IFK3DWEgl8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.mft
Manifest number:          0999
Signing time:             Sun 13 Apr 2025 14:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:20 +0000
Files and hashes:         1: lQvman0TcS9UAXTyd3ZXIdLOBqI.roa (hash: P14NthyAGiyfoJgBsi6HRoRfnfWtEu8GOwgj8n8I3ag=)
                          2: wjZC0as50wnsXzPk6IFK3DWEgl8.crl (hash: sL8v9qN5tKkOpXsM8ZWsGTa+GppEU9V/nmkQB5zNoRE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:68:84:e3:16:c3:17:5a:99:5d:d3:b2:e5:13:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c23642d1ab39d309ec5f33e4e8814adc3584825f
        Validity
            Not Before: Apr 13 14:01:20 2025 GMT
            Not After : Apr 14 14:01:20 2025 GMT
        Subject: CN=70ebce856a2fd45274ad900521a678a71e311faf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:71:c7:87:67:b7:51:62:8a:94:ab:5d:e3:34:
                    3a:b7:ad:23:7c:11:ec:dd:24:d6:3f:10:94:bf:08:
                    a0:2b:ae:ce:8c:73:20:82:0e:0a:2f:b1:70:23:c3:
                    e7:81:35:de:a5:b2:92:32:49:cb:ad:12:95:3e:db:
                    2a:76:89:0d:9e:cb:67:5f:3c:77:86:db:d3:3f:b5:
                    c4:d2:b4:40:41:14:98:40:e4:14:bc:35:6b:dd:b0:
                    e4:d2:61:b1:7e:b5:49:7a:ab:63:9d:50:82:ba:22:
                    8b:2e:74:88:2c:e0:a7:af:d0:3e:82:3d:1d:5f:68:
                    64:01:03:00:ae:34:6a:28:0e:75:5a:d4:44:a6:bb:
                    0e:22:d5:13:87:e5:8c:f9:7b:a9:12:93:a9:56:fe:
                    16:23:f6:a1:0f:1d:aa:bf:53:ad:55:b6:38:ff:68:
                    28:a8:b9:17:52:b7:62:21:d7:60:0e:aa:37:a6:6d:
                    0c:b5:16:52:c8:a6:1f:50:cb:e1:68:c6:b3:84:31:
                    fb:a7:48:7f:ae:9b:ac:25:bd:52:1f:05:ea:22:79:
                    db:f4:a0:25:9a:27:3a:19:3e:5f:ac:59:5e:e0:6b:
                    d9:b5:28:30:8d:3e:7c:3a:a9:df:f3:e3:7e:f6:6b:
                    d8:c4:f5:ca:a1:42:19:4d:80:cb:e8:fd:d6:b8:3b:
                    0e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:EB:CE:85:6A:2F:D4:52:74:AD:90:05:21:A6:78:A7:1E:31:1F:AF
            X509v3 Authority Key Identifier:
                keyid:C2:36:42:D1:AB:39:D3:09:EC:5F:33:E4:E8:81:4A:DC:35:84:82:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjZC0as50wnsXzPk6IFK3DWEgl8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:3c:a1:6e:e5:e7:9f:fe:cf:b8:21:f9:ab:a2:93:a1:90:62:
         f4:d8:ba:30:4c:42:33:66:52:be:c2:b8:78:4d:5b:64:86:d2:
         1d:a6:89:02:21:36:30:43:59:e5:50:51:1f:d4:7d:65:cd:4a:
         3b:b5:7d:d7:14:cb:25:6b:59:ca:84:c5:8a:d1:aa:46:2a:cf:
         11:c0:57:c2:8c:3a:37:ff:db:89:7d:aa:a3:f9:a5:a9:d2:30:
         72:bd:f0:8d:ed:1c:5a:49:0f:9d:2b:7f:d6:fd:d7:ac:09:72:
         b3:4b:38:46:37:69:20:98:ef:e0:44:9d:05:d4:d8:ad:59:35:
         71:13:da:4e:d8:a6:c8:86:7c:b3:2b:80:73:a6:59:04:cf:e3:
         96:fd:63:d5:5c:57:0d:bd:c2:96:6a:43:05:e0:6a:1b:9a:74:
         59:84:72:4f:c8:16:10:b3:f2:73:54:d1:00:b0:c3:5c:8a:2f:
         26:e7:16:96:78:17:80:2c:1f:09:cf:88:77:98:44:35:10:b9:
         67:e6:44:04:8f:ba:13:25:75:93:b9:13:44:a6:55:e4:4c:2f:
         eb:57:6d:e4:88:ef:fa:aa:71:a5:73:9f:bb:3d:36:b5:64:f8:
         ad:7e:69:53:ed:be:8e:29:d3:31:fa:51:31:6c:b8:bd:24:9b:
         ef:4b:01:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----